$ rpki-client -vvf rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.mft File: f8JFjIbiXJNFoIUssn6xcnf7gaM.mft (raw, json) Hash identifier: d/Ywl87G/Nv2jRfRDLWdnYkmw26y3U3+mm6Rmf1HrOs= Subject key identifier: 42:15:E9:A0:91:7C:A2:62:F7:F2:33:B5:78:2A:35:DD:1E:03:90:1F Authority key identifier: 7F:C2:45:8C:86:E2:5C:93:45:A0:85:2C:B2:7E:B1:72:77:FB:81:A3 Certificate issuer: /CN=A9191DE0/serialNumber=7FC2458C86E25C9345A0852CB27EB17277FB81A3 Certificate serial: 09CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8JFjIbiXJNFoIUssn6xcnf7gaM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.mft Manifest number: 09C7 Signing time: Sat 18 Oct 2025 21:00:44 +0000 Manifest this update: Sat 18 Oct 2025 21:00:44 +0000 Manifest next update: Sat 25 Oct 2025 21:00:44 +0000 Files and hashes: 1: f8JFjIbiXJNFoIUssn6xcnf7gaM.crl (hash: uP1ArsGn2xglfFs2yoaxEZ517tx/iT5QQcTZkuU7AoI=) 2: F898AEBC8F6411EA96126E5DC4F9AE02.roa (hash: onBNfM/Pn1GMIqfcUmL/COXE+dl4lbaBIGgghkrv3qQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.crl rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8JFjIbiXJNFoIUssn6xcnf7gaM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2510 (0x9ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191DE0, serialNumber=7FC2458C86E25C9345A0852CB27EB17277FB81A3 Validity Not Before: Oct 18 21:00:44 2025 GMT Not After : Oct 25 21:00:44 2025 GMT Subject: CN=68f3fffc-58e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e8:ce:e0:b0:75:e2:50:e7:f2:e8:fa:b8:44: b5:e2:6d:7e:e2:7d:70:17:81:c0:5e:68:45:30:8e: d1:ec:4a:c0:ca:cf:c7:03:51:f9:5f:38:15:dc:95: a8:62:e2:8f:68:2b:e7:6f:7b:af:7c:b2:69:7d:d1: 46:fe:d7:0a:21:04:b8:aa:b0:d4:ff:20:9d:8b:33: 14:ed:37:bd:85:10:89:ab:89:18:78:73:17:30:11: d1:39:7b:51:22:1a:fa:a1:46:f1:e9:37:1f:46:aa: 92:54:33:f2:3e:ae:d4:5c:b7:9a:fc:07:98:7f:85: 66:95:50:2f:ac:a8:68:c4:ad:e1:8e:a3:ab:6c:14: 89:21:3f:bf:1b:cd:e9:7f:4f:c6:31:33:be:cf:f1: 90:76:b5:b3:58:71:70:46:e3:3f:1c:83:95:2f:5b: 75:19:b4:3c:e2:01:ae:12:f8:10:42:35:84:be:45: c6:1a:0b:2e:e3:32:da:ee:88:ae:bb:63:46:fe:68: 7c:7c:3d:57:61:f1:9e:45:26:f1:ae:2d:68:e1:4b: e2:84:92:97:e3:b7:4b:27:ec:96:1e:55:25:2c:f4: 4a:0f:2c:70:0e:55:57:76:bc:e5:93:a4:f2:5c:ad: 15:c1:08:9a:cf:e3:7a:9a:83:18:0e:8b:a9:f8:aa: 69:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:15:E9:A0:91:7C:A2:62:F7:F2:33:B5:78:2A:35:DD:1E:03:90:1F X509v3 Authority Key Identifier: keyid:7F:C2:45:8C:86:E2:5C:93:45:A0:85:2C:B2:7E:B1:72:77:FB:81:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8JFjIbiXJNFoIUssn6xcnf7gaM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:73:2a:40:54:6b:df:09:af:be:c9:cb:55:51:c6:7e:5e:f5: 74:e3:f7:19:c8:d9:74:ba:13:8c:43:9b:e2:30:9d:07:2c:21: e1:17:23:95:0f:2e:7e:83:45:4b:a5:46:a4:c1:30:1f:b5:ca: 1e:0e:93:b1:ad:f0:3b:68:da:c6:ef:59:ca:55:db:91:8c:46: 50:1f:ad:89:3e:a2:30:28:0e:f8:b5:4f:73:7a:84:b0:fc:93: 23:42:98:83:e2:96:ac:3f:c8:f6:c0:62:2b:f4:6c:9a:26:77: 84:bd:14:59:55:6c:86:5f:ab:bf:a3:14:60:91:18:b8:0f:3f: 84:1d:85:28:9c:ba:b1:2c:38:69:9e:78:27:3e:b3:b7:b5:05: 26:74:33:af:7d:4a:83:ba:2a:48:6f:a4:d5:df:3c:28:5a:25: 22:b6:c6:0c:fd:17:d7:db:e7:a6:52:a0:5f:6b:93:ce:0c:fb: b1:c2:1b:38:a2:20:f3:94:70:3d:31:26:4a:de:e1:c2:dc:58: e0:34:bd:3f:13:47:08:af:1f:dc:86:8b:2c:54:6f:3e:71:9c: d9:8e:e1:5e:bc:ba:ac:51:19:3a:5c:5d:59:66:ce:01:53:aa: 2f:84:61:9e:72:61:e8:8e:57:3e:e0:a0:11:7c:53:9e:4d:e8: 4d:ab:b7:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCc4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFERTAxMTAvBgNVBAUTKDdGQzI0NThDODZFMjVDOTM0NUEwODUyQ0IyN0VCMTcy NzdGQjgxQTMwHhcNMjUxMDE4MjEwMDQ0WhcNMjUxMDI1MjEwMDQ0WjAYMRYwFAYD VQQDEw02OGYzZmZmYy01OGUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArejO4LB14lDn8uj6uES14m1+4n1wF4HAXmhFMI7R7ErAys/HA1H5XzgV3JWo YuKPaCvnb3uvfLJpfdFG/tcKIQS4qrDU/yCdizMU7Te9hRCJq4kYeHMXMBHROXtR Ihr6oUbx6TcfRqqSVDPyPq7UXLea/AeYf4VmlVAvrKhoxK3hjqOrbBSJIT+/G83p f0/GMTO+z/GQdrWzWHFwRuM/HIOVL1t1GbQ84gGuEvgQQjWEvkXGGgsu4zLa7oiu u2NG/mh8fD1XYfGeRSbxri1o4UvihJKX47dLJ+yWHlUlLPRKDyxwDlVXdrzlk6Ty XK0VwQiaz+N6moMYDoup+KppWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEIV6aCR fKJi9/IztXgqNd0eA5AfMB8GA1UdIwQYMBaAFH/CRYyG4lyTRaCFLLJ+sXJ3+4Gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MURFMC81OUNBNjY2RThG NjMxMUVBQUYwNzg1NThDNEY5QUUwMi9mOEpGakliaVhKTkZvSVVzc242eGNuZjdn YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Y4SkZqSWJpWEpORm9JVXNzbjZ4Y25mN2dhTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MURFMC81OUNBNjY2RThGNjMxMUVBQUYwNzg1NThDNEY5QUUwMi9mOEpGakliaVhK TkZvSVVzc242eGNuZjdnYU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzcypAVGvfCa++yctVUcZ+XvV04/cZyNl0uhOMQ5viMJ0HLCHhFyOV Dy5+g0VLpUakwTAftcoeDpOxrfA7aNrG71nKVduRjEZQH62JPqIwKA74tU9zeoSw /JMjQpiD4pasP8j2wGIr9GyaJneEvRRZVWyGX6u/oxRgkRi4Dz+EHYUonLqxLDhp nngnPrO3tQUmdDOvfUqDuipIb6TV3zwoWiUitsYM/RfX2+emUqBfa5PODPuxwhs4 oiDzlHA9MSZK3uHC3FjgNL0/E0cIrx/chossVG8+cZzZjuFevLqsURk6XF1ZZs4B U6ovhGGecmHojlc+4KARfFOeTehNq7dj -----END CERTIFICATE-----Generated at Mon Oct 20 19:28:25 2025 by rpki-client